Malicious code in polymarket-data-fetcher (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6b5ac8b803d36ef490adff8a4d3110c4030063bbd2345e4b23d1871909638e9 The code attempts to monitor the clipboard and replace copied cryptocurrency addresses, as well as establish persistence. --- Category: MALICIOUS - The campaig...

MAL-2026-4285 Malicious code in polydata-analytics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c2f2ae400ee7411678735073e22d4c662de5653a4add84eaca159ed0ba004a Package self-describes as a Polymarket market-data analytics tool but ships a Windows clipboard monitor src/polymarketdatafetcher/clipper/winclip.py...

MAL-2026-3805 Malicious code in netping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ecc862a2bc12e6779034a99abd68c5d4ffb047f1fc2ae94407dd9e4ad54df5cf The package silently downloads and installs an autostart script that then monitors clipboards and replaces copied cryptowallet adresses. --- Category: MALICIOU...

Malicious code in pandas-data (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 34c3e3d51b95102fd72f00c2b6c4bce7e34a801326dfbe7557f2d4346ed37508 Package installs persistent malware acting as Rat, with the focus of stealing data and modifying copied cryptowallet addresses. --- Category: MALICIOUS - The...

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

Malicious actors have published more than 451 unique Python packages on the official Python Package Index PyPI repository in an attempt to infect developer systems with clipper malware. Software supply chain security company Phylum, which spotted the libraries, said the ongoing activity is a...

Malicious code in tkcalendr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx eba496de96dcac7d3d52a00087c49009d908f0eb73de4335ec91b76ce452d566 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcaelndar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8c49be3ad2a45b16c6ad5922865a55eb1b6086e4af4f531855090f53be356741 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcalendarr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a322359b90be8e13f7e6aaf88275d81ce33a6aa40b88a4c53bd70390df182dae Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifuloup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f40099fdaf3de2f2531a5cc04e7f213371ba9dea34aa70d6ab5fe9c8f8e0b964 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautfiulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b85b50bcd0b4a330d349dd99f0b5eaa5f9409daaa38deac675c838f483ef0d4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifusloup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6ab9137af9ce4861729b9ee84ad307f8f6cb45d98a02dc85fd8f1eafa0a47cb5 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulosup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d29c9780cfa766935c7a3be527ad99f08a1e5dba0576b80738b28dfa060e30de Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautiuflsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6411c59a6e312c0f06709b86a5897501c1684f7f958193ac00776fb82b39a116 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautiflusoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f097b90e4cb28617a08665f59a75d0bd58a2e48a1f1e9f3b8cb6414a71c9cbc0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsooup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20295d15744840724442dda39ce2b027e50b10c1d88c6096693b327ae31b9a9e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pycodestylee (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67c78a36195cb946b9164797b0cdf6d13da030d376bda7f2d9b7c7eddb819bfd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pycodsetyle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca39bba2a748e3979bf8f399b35337af6482b0ff2be7989d0c67a847e5c4c4cb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitppython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3bbc32fb329f214c3996245207fe4b25d951b3f2be6b97840b2b735d94846410 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitptyhon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 45c246067508604b2fc9cc840ff847aff48256114629150276ba40a73c6afff7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pprompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 688eec852f4ae2ab7b9b359f6355fc88e772deae37da361a71acdc859750ccf3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...